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Abstract. For a complex abelian surface A with endomorphism ring isomorphic to 
the maximal order in a quartic CM- field K, the Igusa invariants ji{A), j2{A), j3{A) 
generate an unramified abelian extension of the reflex field of K. In this paper we give 
an explicit geometric description of the Galois action of the class group of this reflex fleld 
on ji ( A) , j2 ( A) , j3 ( A) . Our description can be expressed by maps between various Siegel 
' modular varieties, and we can explicitly compute the action for ideals of small norm. We 

use the Galois action to modify the CRT method for computing Igusa class polynomials, 
and our run time analysis shows that this yields a significant improvement. Furthermore, 
we find cycles in isogeny graphs for abelian surfaces, thereby implying that the 'isogeny 
' volcano' algorithm to compute endomorphism rings of ordinary elliptic curves over finite 

fields does not have a straightforward generalization to computing endomorphism rings 
of abelian surfaces over finite fields. 

:^ 

■ 1. Introduction 

-4— » 

Class field theory describes the abelian extensions of a given number field K. For K = 
Q, the Kronecker- Weber theorem tells us that every abelian extension of K is contained 
I in a cyclotomic extension. In 1900, Hilbert asked for a similar 'explicit description' for 
>■ I higher degree number fields. This is known as Hilbert's 12th problem, and it is still 
^ ■ largely unsolved. 

OO ■ Besides K = Q, the answer is only completely known for imaginary quadratic fields. 

In this case, the solution is provided by complex multiplication theory, see e.g. |10l Ch. 2]. 
The techniques used can be generalized to CM-fields, i.e., imaginary quadratic extensions 
Q"^ I of totally real fields. However, for general CM-fields we do not always get an explicit 
O ' description of the maximal abelian extension. From a computational perspective, the 
case of general CM-fields is far less developed than the imaginary quadratic case. 

^ ■ In this article, we solely focus on degree 4 primitive CM-fields K. For such fields, 

invariants of principally polarized abelian surfaces (p.p.a.s.) with endomorphism ring 
isomorphic to the maximal order Ok of K generate a subfield of the Hilbert class field 
of the reflex field of K (a degree 4 subfield of the normal closure of K). To explicitly 
compute the resulting extension, we compute an Igusa class polynomial 

Pk= n {X - MA)) e Q[X]. 

{A p.p.a.s. \End{A)=OK}/= 

Here, ji is one of the three Igusa invariants of A. A contrast with the case of imaginary 
quadratic fields - where we compute the Hilbert class polynomial - is that the polynomial 
Pk has rational coefficients which are not integers in general, and it need not be irreducible 
over Q. 
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There are three methods to exphcitly compute the polynomial Pk'- complex analytic 
evaluation of the invariants [mHUHS], the CRT method using finite field arithmetic [12] 
and the computation of a canonical lift p3| |9] using p-adic arithmetic for p = 2, 3. 
However, none of these three approaches exploit the Galois action of the maximal abelian 
extension of the refiex field on the set of principally polarized abelian surfaces with 
endomorphism ring Ok- The goal of this article is to make this Galois action explicit 
and give a method to compute it. 

Our algorithm to compute the Galois action significantly speeds up the CRT-approach 
described in \121 to compute Igusa class polynomials and it can be used to improve the 
3-adic approach [H] as well. The improvement in computing Igusa class polynomials 
parallels the improvements given in [3] for computing Hilbert class polynomials. Our run 
time analysis is similar to the analysis in [3] . Contrary to the genus 1 algorithm however, 
the genus 2 algorithm is not quasi-linear in the size of the output. We suggest further 
refinements that might yield a quasi-linear algorithm of further study in Section 6. 

Besides speeding up the computation of Igusa class polynomials, our algorithm gives a 
method of computing isogenous abelian surfaces over finite fields. Computing an isogeny 
is a basic computational problem in arithmetic geometry, and we expect that our algo- 
rithm can be used in a variety of contexts, ranging from point counting on Jacobians of 
curves to cryptographic protocols. 

Our computations naturally lead to the study of the (/, /)-isogeny graph of abelian 
surfaces over finite fields. For ordinary elliptic curves, the /-isogeny graph looks like 
a 'volcano' and this observation forms the heart of the algorithm to compute the 
endomorphism ring of an ordinary elliptic curve over a finite field. We show that for 
abelian surfaces, the (/, /)-isogeny graph does not have a volcano shape. This shows that 
a straightforward generalization of the elliptic curve algorithm to abelian surfaces does 
not work. 

The structure of this paper is as follows. In Section [2] we recall the basic facts of complex 
multiplication theory and background on CM abelian surfaces and their invariants. In 
Section [3] we describe the Galois action on the set of isomorphism classes of abelian 
surfaces with CM by Ok in a 'geometric way'. Our algorithm to compute this action 
is intrinsically linked to Siegel modular functions of higher level. Section S] gives the 
definitions and properties of the four Siegel modular functions that we use. The algorithm 
to compute the Galois action is detailed in Section [5] and we apply it in Section [6] where 
we improve the method to compute an Igusa class polynomial modulo a prime p. We 
give a detailed run time analysis of our algorithm in Section 6 as well. We illustrate 
our approach with various detailed examples in Section [71 A final Section |8] contains the 
obstruction to the volcano picture for abelian surfaces. 

2. CM ABELIAN SURFACES 

2.1. CM Theory. 

In this section we recall the basic facts of CM-theory for higher dimensional abelian 
varieties. Most of the material presented in this section is an adaptation to our needs of 
the definitions and proofs of Shimura's [38] and Lang's [29] textbooks. 

We fix an embedding of Q ?■ C. By a real number field, we mean a field that is 
fixed by complex conjugation. With this convention, a CM field i^' is a totally imaginary 
quadratic extension of a totally real number field. Let denote the real quadratic 
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subfield of K, and let n be the degree of over Q. The 2n embeddings ^ Q 
naturally come in pairs. Indeed, we can choose n embeddings $ = . . . , such 
that we have Hom(i^, Q) = $ U $. We call such a set $ a CM-type for K, and we 
interpret a CM-type in the natural way as a map K C". 

If $ cannot be obtained as a lift of a CM-type of a CM-subfield of K, then we call 
$ primitive. For instance, in the simplest case = Q, CM-fields K are imaginary 
quadratic and every choice for K "-^ Q determines a primitive CM-type. If K has 
degree four then every choice of a CM-type is primitive when K does not contain an 
imaginary quadratic field. It is not hard to show |38i, Sec. 8.4] that this occurs exactly 
for Gal(L/Q) = D4, C4, where L denotes the normal closure of K. We say that the field 
K is primitive in this case. 

In this article, we will only consider primitive quartic CM-fields K. For the remainder 
of this section, we fix such a field K. We say that a principally polarized abelian surface 
A/C has CM by the maximal order Ok if there exists an isomorphism Ok End(A). 
The CM-type distinguishes these surfaces. More precisely, a surface A that has CM by 
Ok has type $ = {ipi, ^22} if the complex representation Rc of the endomorphism algebra 
End(A) (g)z Q satisfies 

One shows [221 Thm. 1.3.6] that a principally polarized abelian surface that has CM by 
Ok of type $ is simple, i.e., is not isogenous to the product of elliptic curves. 

Let $ be a CM-type for K. For an Oj^-ideal /, the quotient Aj = C^/$(/) is an 
abelian surface of type $ by [23 Thm. 4.1]. This surface need not admit a principal 
polarization. The dual variety of Aj is given by Ai = CV$(/ ^K^), where 

D^i = {x G I Tik/q{xOk) C Z} 

is the inverse different and / denotes the complex conjugate of J. If n E K satisfies 
$(7r) G («R>o)^ and tt^k = (-^-^)"\ then the map Af Aj given by 

(2:1, 2:2) ^ {(Pi{n)zi,ip2{7!-)Z2) 

is an isomorphism ( |38[ p. 102-104]) and Aj is principally polarizable. All principally 
polarized abelian surfaces with CM by Ok of type $ arise via this construction. 

Let L be the normal closure of K. We extend $ to a CM-type $' of L, and we define 
the reflex field 

The CM-type on K induces a CM-type /$ = {cr"V* : o" G $'} of the reflex field Kq>. 
The field is a subfield of L of degree 4. In particular, it equals K in the case K 
is Galois. If L/Q is dihedral, then Kq, and K are not isomorphic. However, the two 
different CM-types yield isomorphic reflex fields in this case. Furthermore, we have 

iK^)u = K 
and the induced CM-type on {K^) equals $. 

An automorphism a of K induces an isomorphism {A, $) (A^, $'^) of CM abelian 
surfaces where = {ipi(T,(f20'}- Thus two CM-types which are complex conjugates of 
each other produce the same sets of isomorphism classes of abelian surfaces. In the Galois 
case there is only one CM-type up to isomorphism and in the dihedral case there are two 
distinct CM-types. 
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2.2. Igusa invariants. 

Any principally polarized abelian surface over C is of the form = C^/(Z^ + Z^r) 
where r is an element of the Siegel upper half plane 

H2 = {r G Mat2(C) | r symmetric, Im(r) positive definite}. 

The moduli space A2 of principally polarized abelian surfaces is 3-dimensional. We are 
mostly interested in the subspace A^2 C. A2 of Jacobians of curves. The structure of A^2 
is well known, we recall it for convenience. Let Y"^ = a^X^ + ... + 09 = f{X) be a genus 
2 curve and write ai, . . . , ae for the roots of /. For simplifying notation, let (ij) denote 
the quantity (afc- — ak^) for a given ordering of the roots. The Igusa-Clebsch invariants 
h, h, h, ho (denoted by A, B, C, D in [Sf, Sec. 3]) are defined by 



/2 = a^ 5^(12)^(34)^(56)2 

15 

/4 = ^(12)2(23)2(31)2(45)2(56)2(64)2 
10 

Jg = al ^(12)2(23)2(31)2(45)2(56)2(64)2(14)2(25)2(36)2 

60 

Ao = 4°5^(^j) = 4°disc(/), 

where we sum over all root orderings which give distinct summands; the subscript 

indicates the number of terms we sum over. 

Theorem 2.1. The moduli space M.2 is isomorphic to 

{[l2:h:h:ho\eVl{C)\h^^()} 
where denotes weighted projective space with weights 2,4,6 and 10. 

Proof. See ED. □ 



We note that the condition Jio 7^ ensures that the polynomial / defining the genus 2 
curve is separable. 

Instead of working with a subset of weighted projective space, many people work with 
an affine subspace of A^2- This non- weighted subspace is given by 



(jl,j2, js) 



r5 T t3 T t2 
-'2 -'4-'2 -'6-'2 



, Iio ho ho 

The functions ji are commonly called the Igusa functions. We remark that there are 
various definitions of these functions and there are different conventions for which choice 
is the 'right' one. Our functions are the same as in e.g. |44j- They have the property 
that for t,t' corresponding to Jacobians of curves, the equality jiir) = jiir') 7^ for 
i = 1,2,3 implies that C and C are isomorphic. A detailed description on computing 
ji(r) for a point r G H2 can be found in [HI H5] . 

A 'weak version' of the main theorem of complex multiplication theory is that, for a 
primitive quartic CM-field K, the Igusa invariants of an abelian variety with CM by Ok 
generate an unramified abelian extension of a reflex field of K. More precisely, we have 
the following result. 
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Theorem 2.2. Let {K, $) be a primitive quartic CM type. Let I be an Ox-ideal with 
the property that there exists a principal polarization on Aj = C^/$(/). Then the field 
Kis,{ji{Ai), j2{Ai), jslAj)) is a subfield of the Hilbert class field of K<s>. The polynomial 

Pk = 1[{X-j,{A)), 

A 

with A ranging over the isomorphism classes of principally polarized abelian surfaces with 
endomorphism ring Ok, has rational coefficients. The same is true for the polynomials 
Qk, Rk for the j2 and j^-invariants. 

Proof. This is [41, Thm. 5.8]. □ 

We wiU see in Corollary 13.21 that, for any primitive CM-type $, there always exists an 
Ox-ideal I such that Aj is principally polarizable. 

3. CM-ACTION 

Throughout this section, we let i^' be a fixed primitive quartic CM-field. We also fix 
a CM-type ^ : K ^ and let A/C be a principally polarized abelian surface that has 
complex multiplication by Ok of CM-type 

3.1. Galois action of the class group. 

We define a group ^{K) as 

{(o, a) I a a fractional OK-ideaA with aa = (a) and a G totally positive}/ ~ 

where two pairs (a, a) and (b, (3) are equivalent if and only if there exists a unit u G K* 
with b = ua and (3 = uua. The multiplication is defined componentwise, and {Ok, 1) is 
the neutral element of ^{K). 

The group ^{K) naturally acts on the finite set S{K, $) of isomorphism classes of 
principally polarized abelian surfaces that have CM by Ok of a given type $. Indeed, 
any such surface is given by an ideal I determining the variety and a '^-positive' element 
T[ E K giving the principal polarization. We now put 

(a, a) ■ (J, tt) = (a/, an) 

for (a, a) G €,{K). By [38, Sec. 14.6], the action of €,{K) on S{K,(^) is transitive and 
free. In particular, we have = \S{K^(^)\. 

The structure of the group ^{K) is best described by the following theorem. Denote 
by C\^{Ok+) the narrow class group of Ok+ and write [0]^+)^ for the group of totally 
positive units of Ok+- 

Theorem 3.1. Let K be a primitive quartic CM-field. Then the sequence 

1 ^ {0*K.y/NK,K^{Ol) ""-^'"^ ^{K) G\{Ok) ""^^ G\\Ok.) 1 

is exact. 

Proof. The exactness at {0]^+Y /Nk/k+{0*k) is ^381 Sec. 14.5]. It remains to show that 
the sequence is exact at C\ {Ok+)- To prove this, we first prov^ that there is a finite 
prime that is ramified in K/ . 

^We thank Everett Howe for suggesting this argument. 
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Suppose that K/K^ is unramified at all finite primes. By genus theory, we then have 
K = K~^{y/n) with n G Z. However, K then has Q{y/n) as quadratic subfield and K is 
a biquadratic field. This contradicts our assumption that K is primitive. 

Because there is a finite prime of that ramifies in K, the extensions K/K^ and 
H~^{K~^)/K~^ are linearly disjoint. Here, denotes the narrow Hilbert class field. By 
Galois theory, we then have 

Gei\{H{K)/K) Gal{KH+{K+)/K) ^ Gal{H+{K+)/K+) 

which proves the theorem. □ 



Remark. The surjectivity of the last arrow was also proved in [2B1 Lemma 2.1] under 
the assumption that there exists a finite prime that ramifies in K/K^ . Our proof shows 
in fact that such a prime always exists. 

Corollary 3.2. Let K he a primitive quartic CM-field. The set S{K) of isomorphism 
classes of principally polarized abelian surfaces with CM by Ok has cardinality 

|5mi = l'^^^)' Gal(K/Q) = C4, 

' ^ ^' \2\it{K)\ if Gal(K/Q) = D4. 

Proof. By Theorem 13. 11 the cardinality \S{K, $)| = is independent of the choice 

of a CM- type $. If we let n denote the number of CM- types up to conjugacy, then the 
theorem follows immediately from the equality [^(i^r)! = n\S{K, $)|. □ 



The Galois group Ga\{Kq,{ji{A)) j Kq,) acts in the following way on the set S{K, $). With 
/$ the CM- type on K,^ induced by $, we define iV$ : K hy 

N^{x) = Y[ ip{x). 

For an (9x^-ideal /, the O^-ideal A^$(/) is called the typenorm of /. We get a natural 
map m : C\{Ok^) ^{K) defined by 

m{p) = {N^{p),Nk,,/q{p)) 

for degree 1 prime representatives p. The Galois group of K^{ji{A)) / is a quotient of 
Gal{H{K^)/K^) = CI{OkJ, and by [3Sl Sec. 15.2] the induced map 

m : Ga\{K^{ji{A))/K^) (i{K) 

is injective. This describes the Galois action. Indeed, the group ^{K) acts on the set of all 
principally polarized abelian surfaces that have CM by Ok , and m maps the Galois group 
injectively into ^{K). In Example 17.21 we will see that the natural map CI{Ok^) ^{K) 
need not be injective. 

The typenorm can be defined in a slightly different way as well. If K/Q is Galois with 
Ga\{K/Q) = (a), then for $ = {l,a} we have N^{p) = p^^"'. If K is not Galois, then 
we have A^<i.(p) = Nl/k{pOl)- We will use this description both for actual computations 
and in the proof of Lemma 16.51 

In the remainder of Section 13.11 we provide the theoretical framework that will allow 
us to explicitly compute the CM-action. Let / be a OK^-ideal of norm I. We assume for 
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simplicity that / is prime. We have m(J) = (A^$(/),/) = {J,l) G where J is an 

Oft-ideal of norm 

Lemma 3.3. Let I be an Ox^-ideal of prime norm I with typenorm N^{I) = J G Ok- 
Then J divides (/) C Ok- 

Proof. This follows from the relation Nq,{I)N^{I) = Nk^/ci{I) = 1 □ 

For an Oft^-ideal M, we define the 'M-torsion' of the abelian surface A by 

A[M] = {P e A{C) I Va G M : a{P) = 0}. 

We assume here that we have fixed an isomorphism End (A) Ok, meaning that M 
is an End(74)-ideal as well. If M is generated by an integer n, then A[M] equals the 
n-torsion A[n\. 

Lemma 13.31 implies that A[J] is a 2-dimensional subspace of the /-torsion A[l] of A. 
The polarization of A induces a symplectic form on A[l], and A[l] is a symplectic vector 
space of dimension 4 over the finite field F^. By CM-theory we know that the quotient 

A/A[J] 

is again a principally polarized abelian surface. By [321 Sec. 23], this implies that A[J] 
is an isotropic 2-dimensional subspace of A[l], i.e., the symplectic form vanishes on A[J]. 
We recall that an isogeny A ^ B between principally polarized abelian surfaces whose 
kernel is a 2-dimensional isotropic subspace of A\f\ is called an {I, I) -isogeny , and 

A A/A[J] 

is an example of an (/, /)-isogeny. 

The moduli space of all pairs {A,G), with A a principally polarized abelian surface 
over C and G a 2-dimensional isotropic subspace of A[l] can be described by an ideal 
V{1) C Q[Xi, Yi, Zi, X2, Y2, Z2]. More precisely, the variety corresponding to V{1) equals 

(2) 

the Siegel modular variety Fq (/) studied e.g. in As a complex Riemann surface, we 
have 

with 

rf^(0 = {(?^)eSp4(z)|c = 02mod/}. 

If we specialize V{1) at a point {Xi,Yi, Zi) = {ji{A), j2{A), j^i^A)) then the resulting 
ideal V'{1) is 0- dimensional. The corresponding variety is a union of points corresponding 
to the '(/, /)-isogenous abehan surfaces'. As there are [Sp4(Z) : rQ^''(/)] = (/^ — !)/(/ — 1) 
isotropic subspaces of dimension 2 in A[l] by [3 Lemma 6.1], there are exactly (/^ — 
!)/(/ — 1) solutions to the system of equations given by V. By construction, the triple 

{n{A/J),J2{A/J),j3{A/J)) 

is one of the solutions. There are + l"^ + I other solutions, and we will see in Section E] 
that for CM-computations it is relatively easy to determine which of the solutions come 
from the typenorm of an (9ft-^-ideal. 

Unfortunately, the ideal V{1) can only be computed for very small /. Indeed, the only 
case that has been done is / = 2 (see [HI Sec. 10.4.2]) and it takes roughly 50 Megabytes 
to store the 3 generators of V. By [7], knowing the ideal V{1) for some prime / implies 
that we have an equation for the Humbert surface of discriminant As computing 
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Humbert surfaces is a traditionally hard problem, we do not expect that much progress 
can be made in computing V{1) for primes / > 2. 

3.2. Richelot isogeny. Although one could use the ideal V{2) from [HI Sec. 10.4.2] to 
compute (2, 2)-isogenies, there is a more efficient way. This alternative, known as the 
Richelot isogeny, is classical and we recall it here for convenience. Let i^' be a field of 
characteristic different from 2, and let C/K he a non-singular genus 2 curve. We can 
choose an equation Y'^ = f{X) for C, with / G K[X] a monic polynomial of degree 6. 
Any factorization / = ABC into three monic degree 2 polynomials defines a genus 2 
curve C given by 

AY'=[A,B][A,C][B,C], 

where A is the determinant of A,B,C with respect to the basis 1,X, X^, and -B] = 
A'B — AB' with A' the derivative of A. This new curve is non-singular precisely when A 
is non-zero. 

One proves [B] that C and C are (2, 2)-isogenous. It is not hard to see that there are 
exactly 15 = (2"^ — l)/(2 — 1) different curves C that can be obtained this way. It follows 
that this construction gives all (2, 2)-isogenous Jacobians Jac(C"). 

4. Smaller functions 

The Igusa functions introduced in Section [2] are 'too large' to be practical in our 
computation of the CM-action: currently we cannot compute an ideal describing the 
variety Yq{1) for primes / > 2. In this section we introduce smaller functions /i, . . . , /4 
that are more convenient from a computational perspective. For iV > 1, we define the 
congruence subgroup of level N as the kernel of the reduction map Sp4(Z) — )■ Sp4(Z/XZ), 
denoted by r{N). 

For x,y G {0, 1}^, define the functions O^^y : H2 -> C by 

^x,,(r) = exp 7rt{{n + f )^r(n + |) + (ri + ffy) . (4.1) 

neZ2 

The functions O^^y are known as the theta constants and arise naturally from the con- 
struction of theta functions |23]. The equality Ox,y{T) = {—l)^^y9x,y{T) shows that only 
10 of the 16 theta constants are non-zero. 

The fourth powers of the functions 6x,y are Siegel modular forms of weight 2 for the 
congruence subgroup r(2) C Sp4(Z). The Satake compactification X(2) of the quotient 
r(2)\H2 has a natural structure of a projective variety, and the fourth powers 9^ y define 
an embedding of X{2) into projective space. 

Theorem 4.1. Let M2(r(2)) denote the C-vector space of all Siegel modular forms of 
weight 2 for the congruence subgroup r(2). Then the following holds: the space M2(r(2)) 
is 5-dimensional and is spanned by the ten modular forms O^y. Furthermore, the map 
X{2) — )■ C defined by the functions O^y is an embedding. The image is the quartic 
threefold in P^ defined by 

u\ — 4-U4 = 

with Uk = y^^Otl^y 

x,y 
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Proof. See ^ Thm. 5.2]. □ 

The Igusa functions ji, ^2, js can be readily expressed in terms of 6*^^, see e.g. [221 
p. 848]. Thus we have an inclusion 

C(ji,j2,j3)CC«,/ey) 

where we include all quotients of theta fourth powers. The functions Ot,y/^t',y' 
tional Siegel modular functions of level 2. Whereas (jiir) , j2{T) , j^i^r)) depends only on 
the Sp4(Z)-equivalence class of r G H2, a value {Ot,yi.'^) I^t>,y'i^))x,x\y,y' depends on the 
r(2)-equivalence class of r. Since the affine points of r(2)\H2 C X{2) correspond to 
isomorphism classes of pairs (A, {Pi, P2, -P3, -P4}) consisting of a principally polarized 2- 
dimensional abelian variety A together with a basis {Pi, P2, P3, P4} of the 2-torsion, the 
functions Ot,y/^t',y' '^ot only depend on the abelian variety in question but also on an 
ordering of its 2-torsion. For every isomorphism class Sp4(Z)r of abelian varieties, there 
are [Sp4(Z) : r(2)] = 720 values for the tuple {dt,yi'^)/^t',y'i'''))x,x',y,y'- The functions 
O^ y/O^i yi are 'smaller' than the Igusa functions in the sense that their Fourier coefficients 
are smaller. A natural idea is to get even smaller functions by considering the quotients 
Ox,y/Ox',y' themselves instead of their fourth powers. 
We define the four functions /i, /2, /s, /4 : H2 — )■ C by 

/i = ^(0,0), (0,0) /2 = ^(0,0), (1,1) /a = ^(0,0), (1,0) fi = 6'(o,o),(o,i), 

with 6(^x,y),{x' ,y') = (^x,y/Gx',y'- Wc strcss that the particular choice of the 'theta constants' 
is rather arbitrary, our only requirement is that we define 4 different functions. The three 
quotients /1//4, f2/ fi^ f^l fi are rational Siegel modular functions. 

Theorem 4.2. //r, r' G H2 satisfy (/i(r), . . . , f^i^r)) = (/i(r'), . . . , fiir')), then we have 
(ji(^),j2(T),j3(r)) = (ji(r'),j2('r'), j3(r'))- Furthermore, the quotients fi/ f^, f2/ fi, fs/ f^ 
are invariant under the subgroup r(8). 

Proof. The vector space M2(r(2)) is spanned by {fi,---fi,g^} where g = 6'(o,i),(o,o)- 
The relation in Theorem 14. ![ together with the five linear relations between the 6^ y from 
Riemann's theta formula [23i p. 232], yield that g'^ satisfies a degree 4 polynomial P over 
L = C(/i, /2, /s, fi). The polynomial P factors over L as a product of the 2 irreducible 
quadratic polynomials 

P_,P^ = T'- {ft - ft + ft - ft)T + {flfl ± flflf. 

By looking at the Fourier expansions of /i, . . . , /4 and g, we see that g^ is a root of P_. 
Hence, the extension L{g^)/L is quadratic and generated by a root of P_. 

For each of the 2 choices of a root of P_ , the other 5 fourth powers of theta functions will 
be uniquely determined. Indeed, the fourth powers are functions on the space M2(r(2)) 
and this space is 5-dimensional by Theorem 14.11 This means that we get a priori two 
Igusa triples (ji, 72,73) for every tuple {fi, f2, fs, fi)- However, a close inspection of the 
formulas expressing the Igusa functions in terms of theta fourth powers yields that these 
Igusa triples coincide. Hence, the triple (71,72,73) does not depend on the choice of a 
root of P_. This proves the first statement in the theorem. 

The second statement follows immediately from a result of Igusa. In [231 P- 242], he 
proves that the field M generated by all theta quotients is invariant under a group that 
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contains r(8). As the field C(/i//4, /2//4, fs/ f-i) is a subfield of M, Tlieorem 14 . 2 1 follows . 
□ 

As the functions /1//4, /2//4, /3//4 are invariant under r(8), the moduli interpretation 
is that they depend on an abelian variety together with a level 8-structure. We let 
Stab(/) be the stabilizer of /1//4, /2//4, /3//4 inside the symplectic group Sp4(Z). We 
have inclusions 

r(8) C Stab(/) C Sp4(Z) 

and the quotient Y{f) = Stab(/)\H2 has a natural structure of a quasi-projective variety 
by the Baily-Borel theorem [2]. However, this variety is not smooth. 

We let 

H2 = {r G H2 I T is not Sp4(Z)-equivalent to a diagonal matrix} 

be the subset of H2 of those r's that do not correspond to a product of elliptic curves 
with the product polarization. The argument in [351 Sec. 5] shows that G = r(8)/Stab(/) 
acts freely on Y{8). By [32, Ch. 2, Sec. 7], the quotient Y{fy = Stab(/)\H^ is a smooth 
variety. 

Lemma 4.3. The map Y{f)* — )■ Y{1) induced by the inclusion Stab(/) — ?■ Sp4(Z) has 
degree 23040 = 32 • 720. 

Proof. The map factors as Y{f)* — t- Y(2) — t- Y{1) thus it suffices to determine the 
degrees of each part. The degree of the map Y{f)* — )■ Y{2) can be seen from the proof of 
Theorem 14. 2t given a projective tuple (/i , /I , /I , /4, 5''^) representing a point Q of Y{2), 
over a splitting field there are 4^ = 64 projective tuples (/i, /2, /s, fi) and exactly half of 
these satisfy P_ = and hence valid preimages of Q. Thus Y{f)* — )• Y{2) has degree 32. 
The degree of Y{2) equals [Sp4(Z) : 1(2)] = 720. This completes the proof. □ 

The proof of Theorem 14.21 gives a means of computing an Igusa triple (ji(T), j2(T), j3(T)) 
from a tuple (/i(r), . . . , /4(r)). For convenience, we make this explicit in the next sub- 
section. 

4.1. Transformation formulae. As in the proof of Theorem 14. 2^ we let g = ^^(o,i),(o,o)- 
The function g'^ is a root of the quadratic polynomial P_. Given values (/i, /2, /a, /4), 
we can pick any root of P as a value for g'^. The functions {ff, . . . /|, g'^} form a basis 
of M2(r(2)). Now, define new functions Xi by 

x, = -f^ + 2f^-f^ + 2f^ + 3g\ 
x, = -ft + 2f,-ft-ft, 

x, = 2ft-ft-ft-fl 

xe = 2ft-f^ + 2f^-ft-3g\ 
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The Xi are called level 2 Satake coordinate functions. In terms of these functions we 
obtain a model for X[2] embedded in given by 

si = 0, 

S2 - 4S4 = , 

where = are the A;-th power sums. 

The action of Sp4(Z)/r(2) on Xj(r) is equivalent to that of Sym({xi, . . . , Xq\) permuting 
the coordinates. Thus we can write level 1 modular functions as symmetric functions of 
the Xi. In particular, the Igusa-Clebsch invariants from Section 2.2 are given by 

^ 5(48s6 - 3sl - 8sl) 



3(12s5 - 5S2S3) 
/4 = 3-^sl , 

h = 3-2(3/2/4 - 2S3) , 

/io = 2-23-'^5-i(12s5-5s2S3), 

from which we can compute absolute Igusa invariants (ji, j2, js)- 

Conversely, if (ji(T)) corresponds to the Jacobian of a curve, then we can compute a 
value for (/i(r), . . . , fiir)) as follows. First we compute the Igusa-Clebsch invariants, then 

S2= 3/4 

s;= 3/2{hh - S/e) 
S5= 5/I2S2S3 + 35 ■ 5/10 
we apply the transformation sq= 27/16/| + l/6s| + 3^/2^/2/10, 

after which we compute the level 2 Satake coordinate functions as the roots xi, . . . ,xq of 
the Satake sextic polynomial 

- -s^X^ - -s;X^ + —slX^ + (-S2S3 - -s^)X + i—sl + —s\ - -se) 

2 2 33 ^ 2 ^Vg23 g 5; ^Vgg2^^g3 g 6; 

with coefficients in Q(s2, S3, S5, se). One choice for ff, /|, /|, /| is given by 

ft= {-X2 - 3:3 - a;5)/3 
/2^= {-x-i - X4 - a;5)/3 

/!= (-X2 - X3 - X4)/3 

/i= (-a;2 - 0:4 - X5)/3. 

Finally, we extract fourth roots to find values for (/i(t), ■ ■ ■ , fiij)) satisfying P_ = 0. It 
is easy to find a solution to P_ = 0: if (/i, . . . , /4) is not a solution, then (v^^/i, . . . , f^) 
is a solution. 

The coefficients of the Satake sextic polynomial are elements of Z[|, |, /2, /4, /e, ho]. In 
particular, this means that our transformation formulae are also valid over finite fields of 
characteristic greater than 3. 

5. The CM-action and level structure 

We let Stab(/) be the stabilizer of the three quotients /1//4, /2//4, /3//4 defined in 
Section m By Theorem 14. 2 [ we have r(8) C Stab(/). For a prime / > 2, we now define 

r(/;/r = (Stab(/)nr(2)(/))\H* 
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which we view as an equahty of Riemann surfaces. By the Baily-Borel theorem, the 
space Y{f; I)* has a natural structure of a variety. Since we restricted to Hg, the variety 
is affine. Just hke in the case / = 1 from Section HI Y{f; I)* is smooth. 

The moduh interpretation of Y{f; I)* is the following. Points are isomorphism classes 
of triples {A,G,L), where A is a principally polarized complex abelian surface, G is 
a 2-dimensional isotropic subspace of A[l] and L is a level 8-structure. The notion of 
isomorphism is that {A, G, L) and {A\ G', L') are isomorphic if and only if there is an 
isomorphism of principally polarized abelian surfaces 

ip:A^A' 

that satisfies ^p{G) = G' and ^p{L) = L' . 

Lemma 5.1. The map Y{f;l)* — t- Y{f)* induced by the inclusion map (Stab(/) fl 
r[,^^(/)) ^ Stab(/) has degree {l^ - !)/(/ - 1) for primes I > 2. 

Proof. This is clear: the choice of a level 8-structure L is independent of the choice of a 
subspace of the /-torsion for Z > 2. □ 



Besides the map Y{f; I)* — t- Y{f)* from the lemma, we also have a map Y[f] I)* — )■ Y{f)* 
given by 

iA,G,L) ^ {A/G,L'). 
Indeed, the isogeny : A ^ A/G induces an isomorphism 

A[8]^(A/G)[8] 

and we have V = f{L). As was explained in Section 3.2, this map also has degree 
(/^ — !)/(/ — 1). Putting all the varieties together, the picture is as follows. 



Y{f;ir 




y(i) 

V 

A3 A3 

The map s sends {A,G,L) G Y{f;l)* to {A,L) G Y{f)* and t is the map induced 
by the isogeny A A/G. This diagram allows us to find all the abelian surfaces that 
are (/, /)-isogenous to a given surface A, where we assume that A is the Jacobian of a 
genus 2 curve. Indeed, we first map the Igusa invariants {ji{A) , j2{A) , j^^A)) to a point 
in Y{1), say given by the Igusa-Clebsch invariants. We then choose {A, L) on Y{f)* lying 
over this point. Although there are 23040 choices for L, it does not matter which one 
we choose. Above {A,L), there are (/^ — 1)/(Z — 1) points in Y{f;l)* and via the map 
t : Y{f; I)* — 7- Y{f)* we map all of these down to Y{f)*. Forgetting the level 8-structure 
now yields (/^ — !)/(/ — 1) points in 1^(1). If A is simple, i.e., not isogenous to a product 
of elliptic curves, then we can transform these into absolute Igusa invariants. 
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Assuming we can compute an ideal V{f; I) C Q[Wi, Xi, Yi, Zi, W2, X2, 12, Z2] defining 
the quasi-projective variety Y{f;l)*, we derive the following algorithm to compute all 
(/, /)-isogenous abelian surfaces. 

Algorithm 5.2. 

Input. A Jacobian A/C of a genus 2 curve given by its Igusa invariants, and the ideal 
V{f-l) defining Y{f-iy. 

Output. The Igusa invariants of all principally polarized abelian surfaces that are {I, /)- 
isogenous to A. 

(1) Compute Igusa-Clebsch invariants {I2, 14, Iq, Iio) G corresponding to A. 

(2) Choose an element (/i, /2, /s, /4) € Y{f)* that maps to {I2, h, h, ho) using the 
method described in Section 4-i- 

(3) Specialize the ideal V{f;l) in {Wi, Xi,Yi, Zi) = (/i, /2, /a, /4) and solve the re- 
maining system of equations. 

(4) For each solution found in the previous step, compute the corresponding point in 
Y{1) using the method given in Section 4-i- 

5.1. Computing /). 

In this subsection, we give an algorithm from to compute the ideal V{f; I) needed 
in Algorithm 15.21 Our approach only terminates in a reasonable amount of time in the 
simplest case / = 3. 

The expression for the theta constants in (4.1) can be written in terms of the individual 
matrix entries, and with some minor modifications we can represent it as a power series 
with integer coefficients. Write t = (rlrl) & H2, then 

where p = e^'^^^^i^^^j/s^ ^ _ g27nr2/8 ^^^^^ ^ _ g27rj(T3-T2)/8_ it is easy to compute 

Fourier expansions for the Siegel modular forms /j. 

One of the (/, /)-isogenous surfaces to C^/ (Z^ + ■ r) is the surface 

CV(Z2 + Z^ . /r), 

and we want to find a relation between the /i's and the functions /^(/t). The expansion 
for fi{lT) can be constructed easily from the Fourier expansion of /^(t) by replacing p, q, r 
with p\q\rK 

Starting with n = 2, we compute all homogeneous monomials of degree n in fiir), fi{lT) 
represented as truncated power series and then use exact linear algebra to find linear de- 
pendencies between them. In this manner we obtain a basis for the degree n homogeneous 
component of the relation ideal. We then check experimentally whether our list of re- 
lations generate V{f] I) or not by computing the degree of the projection maps. If one 
of the projection maps has degree larger than + P + I + 1, then more relations are 
required, in which case we increment n by 1 and repeat the procedure. We stop once we 
have found sufficiently many relations to generate V{f\ I). 

Using this method we computed the ideal y(/;3). The (3, 3)-isogeny relations in 
V{f] 3) are given by 85 homogeneous polynomials of degree six. The whole ideal takes 
35 kilobytes to store in a text file, see 

|http : / /echidna . maths . usyd . edu . au/ ^davidg/ThesisData/ theta33isogeny . txt . 
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The individual relations are fairly small, having at most 40 terms. Furthermore, the co- 
efficients are 7-smooth and bounded by 200 in absolute value, which makes them amenable 
for computations. 

We point out however that we have not rigorously proven that the ideal V{f; 3) is 
correct. To do this we would need to show that our 85 polynomials define relations 
between Siegel modular forms rather than just truncated Fourier expansions. From the 
work of Poor and Yuen [37] there is a computable bound for which a truncated Fourier 
expansion uniquely determines the underlying Siegel modular form. Thus with high 
enough precision our relations are able to be proven. A Grobner basis computation in 
Magma [5] informs us that the projection maps have the expected degree 40, hence we 
have obtained enough relations. Under the assumption that these relations hold, the 
ideal V{f]3) is correct. 

Our (3, 3)-isogeny relations hold for all Jacobians of curves. We remark that if we 
restrict ourselves to CM-abelian surfaces defined over unramified extensions of Z3, then 
there are smaller (3, 3)-isogeny relations, see [9]. These smaller relations cannot be used 
however to improve the 'CRT-algorithm' as in Section 6.3. 



6. The CM-action over finite fields 

6.1. Reduction theory. 

The theory developed in Sections [3HS] uses the complex analytic definition of abelian 

(2) 

surfaces and the Riemann surfaces Yq (/) and Y{f]l)*. We now explain why we can 
use the results in positive characteristic as well. Firstly, if we take a prime p that splits 
completely in K, then by [17^ Thm. 1, Thm. 2] the reduction modulo p of an abelian 
surface A/H{Kq,) with endomorphism ring Ok is ordinary. The reduced surface again 
has endomorphism ring Ok- 

(2) 

Furthermore, one can naturally associate an algebraic stack 2lro(p) to Yq {I) and prove 
that the structural morphism 2lro(p) — ^ Spec(Z) is smooth outside /, see [lOl, Cor. 6.1.1.]. 
In more down-to-earth computational terminology, this means the moduli interpretation 
of the ideal V d q,[X 1, . . . , Z2] remains valid when we reduce the elements of V modulo 
a prime p ^ I- 

The reduction of Y{f\ I)* is slightly more complicated. The map Y{^1) — )■ /)* is 
finite etale by [211 Thm. A. 7. 1.1.], where we now view the affine varieties Y{f;l)* and 
Y{81) as schemes. It is well known that Y{N) is smooth over Spec(Z[l/A^]) for > 3, 
so in particular, the scheme Y{f;l)* is smooth over Spec(Z[l/(2Z)]). Again, this means 
that the moduli interpretation for the ideal V{f] I) C Q[W^i, . . . , Z2] remains valid when 
we reduce the elements of V{f; I) modulo a prime p \ 21. 

We saw at the end of Section |4] that our transformation formulae are valid modulo p 
for primes p > 3. Putting this all together, we obtain the following result: 

Lemma 6.1. Let I be prime, and let p\ 61 be a prime that splits completely in a primitive 
CM-field K . Then, on input of the Igusa invariants of a principally polarized abelian 
surface A/Yp with End(A) = Ok and the ideal V{f; I) C Fp[W^i, . . . , Z2], Alaorithm \5.2\ 
computes the Igusa invariants of all {l,l)-isogenous abelian surfaces. 

6.2. Finding (/, /)-isogenous abelian surfaces. 
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Fix a primitive quartic CM-field and let p f 6/ be a prime that splits completely in 
the subfield Kq>{ii{A) , i2{A) , i^{A)) of the Hilbert class field of Kq>. By the choice of p, 
the Igusa invariants of an abelian surface A/Yp with End(A) = Ok are defined over the 
prime field Fp. Moreover, p splits in Ki^, and as it splits in its normal closure L it will 
split completely in hence Lemma 16.11 applies. 

If we apply Algorithm 15.21 to the point {ii{A) , j2{A) , i3,{A)) and the ideal V{f; I), then 
we get (/^ — !)/(/ — 1) triples of Igusa invariants. All these triples are Igusa invariants 
of principally polarized abelian surfaces with endomorphism algebra K. Some of these 
triples are defined over the prime field Fp and some are not. However, since p splits 
completely in the field of moduh K^[ii{A), i2{A), i^{A)), the Igusa invariants of the 
surfaces that have endomorphism ring Ok o'^e defined over the field Fp. 

Algorithm 6.2. 

Input. The Igusa invariants of a simple principally polarized abelian surface A/Fp with 
Eiad{A) = Ok, and the ideal V{f] I) C Fp[iyi, . . . , Z2]. Here, I is a prime such that there 
exists a prime ideal in Kq> of norm I. Furthermore, we assume that p\Ql. 

Output. The Igusa invariants of all principally polarized abelian surfaces A' /Yp with 
End(A') = Ok that are {l,l)-isogenous to A. 

(1) Apply Alaorithm \5.2\ to A and V{f; I). Let S be the set of all Igusa invariants that 
are defined over Fp. 

(2) For each {ji{A'), j2{A'), j^^A')) G S, construct a genus 2 curve C having these 
invariants using Mestre's algorithm (\3T\. [8]j. 

(3) Apply the Freeman- Lauter algorithm [H] to test whether Jac(C) has endomor- 
phism ring Ok ■ Return the Igusa invariants of all the curves that pass this test. 

We can predict beforehand how many triples will be returned by Algorithm 16. 2[ We 
compute the prime factorization 

(0 = pr • • • 

of (/) in Kij,. Say that we have n < A prime ideals pi, . . . , p„ of norm / in this factorization, 
disregarding multiplicity. For each of these ideals pt we compute the typenorm map 
m{pi) G (t{K). The size of 

{m(pi),...,m(p„)} C (t{K). 
equals the number of triples computed by Algorithm 16.21 

Remark 6.3. Step 1 of the algorithm requires working in an extension of Fp. The degree 
of this extension depends on the splitting behaviour of 2 in Ok- An upper bound is given 
by 4[Fp(A[2]) : Fp] < 24, where Fp(A[2]) denotes the field obtained by adjoining the 
coordinates of all 2-torsion points of A. 

6.3. Igusa class polynomials. 

The CRT-algorithm [12j to compute the Igusa class polynomials Pk,Qki Rk ^ Q[-^] 
of a primitive quartic CM-field K computes the reductions of these 3 polynomials modulo 
primes p which split completely in the Hilbert class field of K<^. The method suggested 
in [12] loops over all p^ possible Igusa invariants and runs an endomorphism ring test for 
each triple {ii{A') , i2{A') , j^{A')) , to see if A' has endomorphism ring Ok- 

We propose two main modifications to this algorithm. Firstly, we only demand that 
the primes p split completely in the subfield K<^{ii{A) , i2{A) , i^{A)) of the Hilbert class 
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field of Kij, tliat we obtain by adjoining tlie Igusa invariants of an abelian surface A that 
has CM by Ok- To find such primes, we simply loop over p = 5, 7, 11 . . ., and for the 
primes (p) = ^i^2^3^4 C Ok^ that split completely in K$ we test if 

m(<Pi) = (jj,) C Ok and N{^i) = fiJJ 

holds, with Ji the complex conjugate of /i. By [38, Sec. 15.3, Thm. 1] a prime p satisfying 
these conditions splits completely in K,i,{ji{A) , j2{A) , j^^A)) . It includes the primes that 
split completely in the Hilbert class field of i^'^. 

Our second modification is a big improvement to compute the Igusa class polynomial 
modulo p. Instead of looping over all 0{p^) curves, we exploit the Galois action in a 
similar vein as in [3]. Below we give the complete algorithm to compute Pk,Rk,Qk 
modulo a prime p meeting our conditions. 

Step 1. Compute the class group 

Cl(Oi,J = (Pi,...,Pfc) (6.1) 

of the reflex field, where we take degree 1 prime ideals pi. For each of the ideals pi of odd 
norm NK^/ci{pi) = h, compute the ideal V{f;li) describing the Siegel modular variety 

Step 2. Apply the following algorithm to find an abelian surface A/Fp that has endo- 
morphism ring isomorphic to Ok- We factor (p) C Ok into primes ^2 
compute a generator vr for the principal ideal ^1^2- We compute the minimal polyno- 
mial of vr over Q. We try random curves C/Fp until we find a curve with 

#C(Fp) e{p+l± Trx/Q(7r)} and #Jac(C) G {/^(l), /^(-l)} . (6.2) 

By construction, such a curve C has endomorphism algebra K. We test whether Jac(C) 
has endomorphism ring Ok using the algorithm from [14j. If it does, continue with 
Step 3, otherwise try more random curves C until we find one for which its Jacobian has 
endomorphism ring Ok- 

Step 3. Let A/Fp be the surface found in Step 2. The group G = m(Cl((9x4>)) acts in 
a natural way on A and we compute the set 

G-{jM),J2{A),J3{A))CS{K) 

as follows. For x = m{I) we write / = Hi PT- "^^^ action of pi is computed using Algo- 
rithm l^^ in case the norm of pi is odd and by applying a Richelot isogeny (see Section 3.3) 
if pi has norm 2. By successively applying the action of pi we compute the action of p"\ 
We then continue with the action of p2, etc. This allows us to compute the action of x 
on the surface A, and doing this for all x we compute the set G ■ {ji{A) , j2{A) , j^lA)) . 
This part of the algorithm is analogous to [3]. 

Step 4. In contrast to genus 1 and the algorithm in [3], it is unlikely that all surfaces with 
endomorphism ring Ok are found. This is partly because we only find surfaces having 
the same CM-type as the initial surface A, so in the dihedral case we are missing surfaces 
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with the second CM- type. Even in the cychc case where there are isomorphism 
classes, it is possible that the map 

m : C1(0/,J ^ ^{K) 

is not surjective, meaning that we do not find all surfaces of a given CM-type. The 
solution is simple: compute the cardinality of S{K) using Corollary l3.2l and if the number 
of surfaces found is less than |S'(ii')|, go back to Step 2. 

Step 5. Once we have found all surfaces with endomorphism ring Ok-, expand 
Pk mod p = J] (X - e Fp[X] 

{A p.p.a.s.\E.nd{A)=0 k} /= 

and likewise for Qx and Rk- The main difference with the method from [12] is that we 
do not find all roots of Pk by a random search: we exploit the Galois action. 

6.4. Run time analysis. We proceed with the run time analysis of the algorithm to 
compute the Igusa class polynomials using the 'modified CRT- approach' from Section [6131 
The input of the algorithm is a degree four CM-field K. The discriminant D oi K can 
be written as DiDq, with Dq the discriminant of the real quadratic subfield of K. 
We will give the run time in terms of Di and Dq. 

First we analyze the size of the primes p used in the algorithm. The primes we use split 
completely in a subfield S = K^{ji{A)) of the Hilbert class field of the refiex field 
of K. If GRH holds true, then there exists [27] an effectively computable constant c > 0, 
independent of K, such that the smallest such prime p satisfies 

p<c-(log|disc(^/Q)|)2, 

where disc(S'/Q) denotes the discriminant of the extension S/Q. Since S" is a totally 
unramified extension of K^, we have 

disc(5/Q)^/[^^Q] = disc(ir$/Q)^/[^*^Ql 

and we derive disc(5'/Q) = disc(i^r$/Q)['^-'^*l Theorem 13. II yields the bound [S : Kq>] < 
4:h~{K), where h^{K) = \CI{Ok)\/\CI{Ok+)\ denotes the relative class number of K. 
Using the bound (see [30] ) 

h-{K) = d{^/DiDo), (6.3) 

we derive that the smallest prime p is of size 0{DiDq). Here, the O- notation indicates 
that factors that are of logarithmic order in the main term have been disregarded. 

The Igusa class polynomials have rational coefficients, and at the moment the best 
known bound for the logarithmic height of the denominator of a coefficient is 0{D\^^ 0^^). 
This bound is proven in |43j, Sec. 2.9] and is based on the denominator bounds in [TS]. A 
careful analysis [131 Sec. 2.11] yields that each coefficient of Pk,Rk,Qk has logarithmic 
height 0(D^^^Z)q^^) as well. A standard argument as in [31 Lemma 5.3] shows that the 
primes that we need can be taken to be of size 0{D\Dq) if GRH holds 
true. We find these primes in time 0{D\Dq). We remark that better bounds on the 
denominators of the coefficients translate into better bounds on the size of the primes we 
need. 



18 



REINIER BROKER, DAVID GRUENEWALD, AND KRISTIN LAUTER 



If GRH holds true, then the ideals pi in Step 1 can be chosen to have norm at most 
12(logDiL'o)^ by [1]. As the method from Section [5]to compute the ideal V{f; N{pi)) is 
heuristic, we will rely on the following heuristic for our analysis. 

Heuristic 6.4. Given a prime I > 2, we can compute generators for the ideal V{f] I) in 
time polynomial in I. 

We remark that, at the moment, our implementation of computing V{f; I) only terminates 
in a reasonable amount of time for 1 = 3. However, in theory we only spend heuristic time 
(logDiDg)" in Step 1 for some n > 2 that is independent of Di,Do. This is negligible 
compared to other parts of the algorithm. 

We continue with the analysis of computing Pk mod p. As we think that the bound 
p = 0{DIDq) is too pessimistic, we will do the analysis in terms of both p and Di, Dq. 
First we analyse the time spent on the random searches to find abelian surfaces with 
endomorphism ring Ok- Every time we leave Step 2, we compute a factor F \ mod p 
of the (first) Igusa class polynomial. Let k < 2[(t{K) : m{Cl{OK^))] be the number of 
factors F we need to compute. The first time we invoke Step 2, we will with probability 1 
compute a new factor Fi of Pk- The second time we call Step 2 we need to ensure that 
we compute a different factor F2 \ Pk- Hence, we expect that we need to call Step 2 
k/{k — 1) times to compute F2- We see that we expect that we have to do Step 2 

A;(l + 1/2 + . . . + 1/A;) = d{k) 
times to compute all factors Fi, . . . , F^. 

Lemma 6.5. We have [(t{K) : m(Cl(Ci^^))] < 2 ■ 2^'^'-^^ for any primitive quartic CM- 
field K, where uj{D) denotes the number of prime divisors of D. 

Proof. We will bound the index of the image of the map m : CI{Ok^) C\{Ok) 
inducing m. By Theorem 13. ![ this index differs by at most a factor 

\{0*k.)^/Nk/k^{0*k)\<2 

from [€{K) : m(Cl(0;,J)]. 

If K/Q is dihedral with normal closure L, then the image of the norm map N^/k '- 
C\{Ol) — C\{Ok) has index at most 2 by class field theory. In the cyclic case, it is not 
hard to check that Im(rfi) contains the squares. It suffices to bound the 2-torsion CI{Ok) 
in this case. The 2-rank of CI{Ok) is determined by genus theory. Using a combination 
of group cohomology and Nakayama's lemma, one can show [53| that the 2-rank is at 
most 6t, with t the number of primes that ramify in the cyclic CM-extension K/Q. The 
lemma follows. □ 

We remark that outside a zero-density subset of very smooth integers, we have u{n) < 
2^1oglogn and the factor d{2^''^^^) = 26'^(^)0(log(L')) can then be absorbed into the 
0-notation. 

The probability that one of the random searches performed in this step will yield an 
abelian surface Jac(C) with endomorphism ring Ok is bounded from below by 

h-{K)/p^ = n{y^DiDo/p') 
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where we have used the effective lower bound h (K) = DiDq) proved in pi)]. We 
therefore expect that we have to compute the number of points on C and on Jac(C) for 



curves C/Fp. Since point counting on genus 2 curves is polynomial time by [36j, this 
takes time 0{p^ /y/DiDo). 

For all the curves C/Fp that satisfy equation (6.2), we have to check whether we have 
End(Jac(C)) = Ok or not. The probability that End(Jac(C)) is isomorphic to Ok is 
bounded from below by 

where the sum ranges over all orders O C Ok that contain Z[7r,7f]. Assuming mild 
ramification conditions on the prime 2, there are only O(logn) orders O C Ok of index n, 
see [33l Cor. 1]. We assume the following heuristic. 

Heuristic 6.6. For any quartic CM-field K, there are 0(log?7.) orders O C Ok of 
index n. 

Justification of heuristic. As indicated in [33], the splitting condition on 2 is purely 
technical and should not affect the result. □ 



We can bound the class number h{0) by 2[Ok ■ Z[TX,Tf]]h{OK) by ^ Thm. 6.7]. It 
follows that we can bound the probability in (6.4) by 

^([0^:Z[7r,7f]]i+-M(^^+))' 

where we have used the bound for the number of divisors of n. Using the index bound 
[Ok '■ Z[7r,7f]] < j^^^r^ from [HI Prop. 6.1], we expect that we have to do 

V {VDlD,y+^ ) 

endomorphism ring computations. 

At the moment, the only known algorithm [H] to test whether End(Jac(C)) = Ok 
holds has a run time 0(p^^), and one application of this algorithm dominates the com- 
putation of Pk G Q[X]. To make the run time analysis of our algorithm easier once a 
better algorithm to compute End(Jac(C)) has been found, we will use the bound 0{X) 
for the run time to compute End(Jac(C)). In total, we see that we spend 

0(2M^)(pV V^D^A^ + (p2+^^ V^/( V^Do)i+^)X)) 

time in all calls of Step 2. 

The action of pj on A/Fp in Step 3 is computed in polynomial time in the norm /j of pj. 
As li is, under GRH, of polynomial size in log(DiDg), we spend time 

0(v/AA^) 

for every time we call Step 3. We call Step 3 as often as Step 2, so in total we spend time 
0(2^''^'^^ ^D^q) in Step 3. 
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The time spent in Step 4 is negligible, and the time spent in Step 5 is 0{\/DiDq). 
Combining all five steps, we see that we compute Pk mod p in time 

0(26-(^)(pV/d;A^+ + v/AA^)). (6.5) 

Theorem 6.7. // GRH and Heuristic assumptions \6. 41 \ 6.(A hold true, then we can com- 
pute the polynomials Pk, Qk, Rk in probabilistic time 

Here, X denotes the run time of an algorithm that, given A/Fp, decides whether End{A) 
is isomorphic to Ok or not. 

Proof. Substitute p = 0{D\Dq) in equation (6.5) to get the time per prime. The result 
follows from the fact that we need to compute Pk-, Rk-, Qk modulo p for 0{D\^'^ D^"^) 
primes. □ 



We conclude this section by some remarks on the run time of our algorithm. At the 
moment, the main bottleneck in the run time is checking whether End(y4) = Ok holds or 
not. In Section [H] we show that a 'straightforward generalization' of Kohel's algorithm 
is impossible and that a new approach is needed. 

From a practical point of view, we are limited by the fact that we can only compute 
the ideal V{f\ 3) in a reasonable amount of time. By only using the primes lying over 2 
and 3, we only use a subgroup of the group ^{K) giving the Galois action. 

Even when these two problems are solved, there is a bottleneck that does not occur in 
the genus 1 algorithm from 0. The random searches take time 0{p^ / \/DiDq) and even 
for the smallest prime p this is of size 

Doing only the random searches for this prime already takes more time than it takes 
to write down the output Pk,Qk, Rk G Q[-^]. Hence, our algorithm is at the moment 
not quasi-linear in the size of the output. 

As noted in [19l Sec. 6] , we can speed up this step of the algorithm by first computing 
a model for the Humbert surface describing all principally polarized abelian surfaces that 
have real multiplication by the quadratic subfield of K. We then perform our random 
search on this two-dimensional subspace of the three-dimensional moduli space. The time 
for the random searches would, for the smallest prime p, drop to 

d{Dl^^Dl'^). 

Although this is less than the size of the output, our algorithm is not quasi-linear once 
all primes p are taken into account. 

To get a quasi-linear algorithm, we think one should do the random searches on a 
one-dimensional subspace of the moduli space. This approach is an object of further 
study. 



7. Examples and applications 



In this section we illustrate our algorithm by computing the Igusa class polynomials 
modulo primes p for various CM-fields. We point out the differences with the analogous 
genus 1 computations. 
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Example 7.1. In the first example we let K = Q[X]/{X^ + 185X^ + 8325) be a cyclic 
CM-field of degree 4. All CM-types are equivalent in this case, and the refiex field of K 
is K itself. The discriminant of K equals 5^ ■ 37^, and the real quadratic subfield of K is 
= Q(v^37). An easy computation shows that the narrow class group of is trivial. 
In particular, all ideal classes of K are principally polarizable, and we have 

€{K) ^ CI{Ok). 

We compute C\{Ok) = Z/IOZ = (pa), where ps is a prime lying over 3. The prime ideal 
p3 has norm 3, and its typenorm A^$(p3) generates a subgroup of order 5 in Cl(Cx)- 

The smallest prime that splits in the Hilbert class field of K is p = 271. We illustrate 
our algorithm by computing the Igusa class polynomials for K modulo this prime. First 
we do a 'random search' to find a principally polarized abelian surface over Fp with endo- 
morphism ring Ok in the following way. We factor (p) C Ok into primes ^2 
and compute a generator n of the principal Oi^-ideal *^3i*^32- The element tt has minimal 
polynomial 

f = X^ + 9X^ + 331X2 ^ 2439X + 73441 G Z[X]. 

If the Jacobian Jac(C) of a hyperelliptic curve C has endomorphism ring Ok, then the 
Frobenius morphism of Jac(C) is a root of either f{X) or f{—X). With the factorization 

/ = (X - ri)(X - r2)(X - r3)(X - u) G K[X], 

a necessary condition for Jac(C) to have endomorphism ring Ok is 

#C(Fp) e{p + l±{n + T2 + Ts + n)} = {261, 283} 

and 

#Jac(C)(Fp) G {/(I), /(-I)} = {71325,76221}. 

We try random values (ji, j25 js) G F^ and write down a hyperelliptic curve C with those 
Igusa invariants using Mestre's algorithm ([31], [8]). If C satisfies the 2 conditions above, 
then we check whether Jac(C) has endomorphism ring Ok using the algorithm in [Hj. 
If it passes this test, we are done. Otherwise, we select a new random value (ji, J2, Js)- 

We find that wq = (133,141,89) is a set of invariants for a surface A/Fp with en- 
domorphism ring Ok- We apply Algorithm 16.21 to wq. The Igusa-Clebsch invariants 
corresponding to Wq are [133,54,82,56]. With the notation from Section HJ we have 
S2 = 162, S3 = 106, S5 = 128, Sq = 30. The Satake sextic polynomial 

S = X^ + 190X^ + 55X3 ^ g2^2 ^ ^ g3 ^ p^^^j 

factors over Fps and we write F^s = Fp{a) where a satisfies + 2a + 265 = 0. We 
express the 6 roots of S in terms of a and pick 

= U7a^ + U7a^ + 259a^ + 34a + 110 

= I76a^ + 211a^ + Ua^ + 134a + 190 

fl = 163a^ + 93a^ + UAa^ + 196a + 115 

= 226a^ + 26la^ + 99a^ + 9a + 27 

as values for the fourth powers of our Siegel modular functions. The fourth roots of 
(/i ) fiy fh ft) ^'^^ defined over Fpio, but the proof of Theorem 4.2 shows that not every 
choice corresponds to the Igusa invariants of A. We pick fourth roots (ri, r2, r3, r4) such 
that the polynomial P_ from Section H] vanishes when evaluated at {T, fi, f2, fs, Ja) = 
(6*1 ri, r2, r3, r4). Here, 6'foi)(oo) computed from the Igusa-Clebsch invariants. 
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For an arbitrary choice of fourth roots for ri, r2, there are two solutions ±r4 to P_ = 0. 
Indeed, if we take Fpio = Fp{f3) with /^^^ + + 133/3^ + 10/3^256/33 + 74/32 + 126/3 + 6 ^ q 
then the tuple (ri, r2, rs, given by 

ri = 179/3^ + 69/3® + 203/3^ + 150^^ + 29/3^ + 258^"^ + 183/3^ + 240/3^ + 255/3 + 226, 
ra = 142/3^ + 105^* + 227/3^ + 244/3^ + 72/3^ + 155/3'' + 2^^ + 129/3^ + 137/3 + 23, 
rg = 63/3^ + 112/3® + 132/3^ + 244/3^ + 94/3^ + 40;3* + 191/3^ + 263/3^ + 85;3 + 70, 
n = 190^^ + 41;3® + 62/3^ + 170^*^ + 151/3'"^ + 240/3"* + 270^^ + 56/3^ + 16;3 + 257 

is a set of invariants for A together with some level 8-structure. 

Next we specialize our ideal V^(/; 3) at {Wi, Xi,Yi, Zi) = (ri, r2, ra, and we solve 
the remaining system of 85 equations in 4 unknowns. Let ('"'i, '"2> ^3) ^4) tie the solution 
where 

r[ = 184/3^ + 48/3^ + 99/3^ + 83/3^ + 20/3^ + 232/3^ + 16/3^ + 223/3^ + 85/3 + 108. 

The quadruple {r'i,r2,r'^,r'^) are invariants of an abelian surface A' together with level 
8-structure that is (3, 3)-isogenous to A. To map this quadruple to the Igusa invariants 
of A' we compute a root of the quadratic polynomial 

This root is a value for ^^01) (oo)- Since we now know all theta fourth powers, we can 
apply the formulas relating theta functions and Igusa functions in Section 4.1 to find the 
Igusa triple (238,10,158). 

In total, we find 16 Igusa triples defined over Fp. All these triples are Igusa invariants 
of surfaces that have endomorphism algebra K. To check which ones have endomorphism 
ring Ok-, we apply the algorithm from |T1]. We find that only the four triples 

(253,138,96), (257,248,58), (238,10,158), (140,159,219) 

are invariants of surfaces with endomorphism ring Ok- The fact that we find 4 new sets 
of invariants should come as no surprise. Indeed, there are 4 ideals of norm 3 lying over 
3 in Ok and each ideal gives us an isogenous surface. 

As the typenorm map m : C\{Ok) — ?• ^{K) is not surjective, we are forced to do a 
second random search to find a 'new' abelian surface with endomorphism ring Ok- We 
apply our isogeny algorithm to wi = (74, 125, 180) as before, and we again find 4 new 
sets of invariants: 

(174, 240, 246), (193, 85, 15), (268, 256, 143), (75, 263, 182). 
In the end we expand the Igusa polynomials 

Pk = + 92X^ + 72X^ + 2nx'^ + Qd.X^ + 195X^ + 233X'' + 140X^ + 45X^ + 123X + 171 , 
Qk = X^^ + 2?,2X^ + 195X** + 45A:'^ + 7X® + 195X^ + n?,X^ + l&X^ + 33X^ + 247A: + 237 , 
Rk = X^° + 240A:° + 57X** + 213A:^ + 145A''^ + ISOX^ + 243X'' + 249X^ + ISIX^ + 134A: + 81 

modulo p = 271. 

Example 7.2. In the previous example, all the prime ideals of K lying over 3 gave rise 
to an isogenous abelian surface. This phenomenon does not always occur. Indeed, let K 
be a primitive quartic CM-field and let pi, . . . , p„ be the prime ideals of norm 3. If we 
have a principally polarized abelian surface A/Fp with endomorphism ring Ok, then the 
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number of (3, 3)-isogenous abelian surfaces with the same endomorphism ring equals the 
cardinahty of 

{m(pi),...,m(p„)}. 

There are examples where this set has less than n elements. 

Take the cyclic field K = Q[X]/{X^ + 219X2 + 10512). The class group of K is 
isomorphic to Z/2Z x Z/2Z. The prime 3 ramifies in K, and we have (3) = Pip2- The 
primes pi,p2 in fact generate CI{Ok)- It is easy to see that for this field we have 

m(pi) = m(p2) e €{K), 

so we only find one isogenous surface. 

Example 7.3. Our algorithm is not restricted to cyclic CM-fields. In this example we 
let K = Q[X]/{X^ + 22X2 ^ 73) ^ CM-field with Galois group D4. There are 2 
equivalence classes of CM-types. We fix a CM-type $ : — )■ and let Kq> be the reflex 
field for $. We have = Q[X]/(X^ + IIX^ + 12), and K and have the same Galois 
closure L. 

As the real quadratic subfield = Q(-\/3) has narrow class group Z/2Z, the group 
^{K) fits in an exact sequence 

1 — > Z/2Z — > e{K) — > Z/4Z — > Z/2Z — > 1 

and a close inspection yields ^{K) = Z/4Z. The prime 3 factors as 

(3) = P1P2P3 

in the reflex field, and we have C1(Ca'„) = Z/4Z = ([pi]). The element m(pi) e €{K) 
has order 4, and under the map (t{K) ^ CI{Ok) = Z/4Z the element /(m(pi)) has 
order 2. We see that even though the ideal Nl/k{PiOl) has order 2 in the class group, 
the typenorm of pi has order 4. 

Of the 4 ideal classes of K, only 2 ideal classes are principally polarizable for $. The 
other 2 ideal classes are principally polarizable for 'the other' CM-type. Furthermore, 
the two principally polarizable ideal classes each have two principal polarizations. 

The prime p = 1609 splits completely in the Hilbert class field of K^. As in Ex- 
ample 17.11 we do a random search to find that a surface A/Fp with Igusa invariants 
wq = (1563,789,704) G has endomorphism ring Ok- We apply Algorithm 16.21 to 
this point. As output, we get wq again and two new points wi = (1396, 1200, 1520) and 
W2 = (1350, 1316, 1483). The fact that we find wq again should come as no surprise since 
m(p3) G ^{K) is the trivial element. The points Wi and W2 correspond to pi and p2. 

As expected we compute that the cycle 

Wo = (1563, 789, 704) (1396, 1200, 1520) ^ (1276, 1484, 7) 

(1350, 1316, 1483) wq 

has length 4. To find the full Igusa class polynomials modulo p, we do a second ran- 
dom search. The remaining 4 points are (782, 1220, 257), (1101, 490, 1321), (577, 35, 471), 
(1154,723,1456). 
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8. Obstruction to isogeny volcanos 

For an ordinary elliptic curve E/Fp over a finite field, Kohel introduced ^25j an al- 
gorithm to compute the endomorphism ring End(£'), which has recently been improved 
in [3]. One first computes the endomorphism algebra K by computing the trace of the 
Frobenius morphism tt of E. If the index [Ok '■ Z[7r]] is only divisible by small primes 
I, then Kohel's algorithm uses the Z-isogeny graph to determine the endomorphism ring. 
The algorithm depends on the fact that the graph of Z-isogenies looks like a 'volcano', 
and one can quotient by subgroups of order I to move down the volcano until one hits 
the bottom. We refer to [131 [22] for the details of this algorithm. This approach succeeds 
because of the following fact. 

Lemma 8.1. Let E, E'/Fp be two ordinary elliptic curves whose endomorphism rings are 
isomorphic to the same order O in an imaginary quadratic field K . Suppose that I ^ p 
is a prime such that the index [Ok '■ O] is divisible by I. Then there are no isogenics of 
degree I between E and E' . 

Proof. This result is well known. Since the proof helps us understand what goes wrong in 
dimension 2, we give the short proof. Suppose that there does exist an isogeny ip : E ^ E' 
of degree /. By the Deuring lifting theorem Thm. 13.14], we can lift if to an isogeny 
if : E E' defined over the ring class field for O. By CM-theory, we can write E' = C/I 
with / an invertible (9-ideal of norm /. But since I divides the index [Ok '■ O], there are 
no invertible ideals of norm /. □ 

Unlike the elliptic curve case, there are a greater number of possibilities for the endo- 
morphism ring of an (/, /)-isogenous abelian surface A/Fp. Necessarily, the order must 
contain Z[7r, vf] where tt corresponds to the Frobenius endomorphism of A. Let ip : A ^ A' 
be an (/, /)-isogeny of principally polarized abelian surfaces where O = End{A) contains 
O' = End{A'). Since <p splits multiplication by /, it follows that Z + /C C C C C and 
hence O' has index dividing in O. In addition, since the Z-rank is greater than two, it 
is possible to have several non- isomorphic suborders of O having the same index. 

A natural question is whether the 'volcano approach' for elliptic curves can be gener- 
alized to ordinary principally polarized abelian surfaces A/Fp. The extension of Schoof 's 
algorithm ^36j enables us to compute the endomorphism algebra K = End{A) ®z Q, and 
the problem is to compute the subring End(y4) = O C Ok- By working with explicit 
Z-torsion points for primes I \ [Ok '■ Z[7r, vf]] one can determine this subring, see [121 IE]- 
This approach requires working over large extension field of Fp and a natural question is 
whether we can generalize the volcano algorithm directly by using (/, Z)-isogenies between 
abelian surfaces. However, the analogous statement to Lemma 8.1 that 

there are no {I, I) -isogenics between A and A' 

if End(74) and End(A') have isomorphic endomorphisms rings whose conductor in Ok 
divides I does not hold in general. This is a theoretical obstruction to a straightforward 
generalization of the algorithm for elliptic curves. 

We first give an example where the analogue of Lemma 18.11 for abelian surfaces fails. 

Example 8.2. Take the point (782, 1220, 257) e Ffggg which we found in Example [731 
Below we depict the connected component of the (3, 3)-isogeny graph. The white dots 
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represent surfaces with endomorphism ring Ok, the black dots correspond to surfaces 
whose endomorphism ring is non-maximal. The lattice of suborders of Ok of 3-power 
index that contain Z['7r, vf] is completely described by the indices of the suborders in this 
case. We have Z[7r,7f] C (^27 C Cg C C3 C Ok, where the subscript denotes the index 
in Ok- 




The leaf nodes all have endomorphism ring O27 and the remaining eight black vertices 
have endomorphism ring O3. We observe that there are cycles in this graph other than 
at the 'surface' of the volcano. o 

The reason that cycles can occur is the following. Just like in Lemma 18. we can 
lift an isogeny (f : A ^ A' to characteristic zero. By CM-theory, we can now write 
A = C^/$(/) for some invertible C-ideal I. The isogenous surface A' equals C^/<l>(o~^/) 
for an invertible (9-ideal o of norm The difference with the elliptic curve case is that 
there do exist invertible (9-ideals of norm P. Hence, the isogeny graph for abelian surfaces 
need not look like a 'volcano'. 

Another ingredient of the endomorphism ring algorithm for elliptic curves can fail. In 
the elliptic curve case, the following property of the /-isogeny graph is essential. Suppose 
that E/Fp has endomorphism ring O and let : E ^ E' be an isogeny from E to an 
elliptic curve with endomorphism ring of index I. If is defined over Fp, then all I + 1 
isogenies of degree / are defined over Fp. 

The analogous statement for dimension 2 is that all {I, /)-isogenies are defined over Fp 
as soon as there is one (/, /)-isogeny : A ^ A' that is defined over Fp. Here, A' is an 
abelian surface with endomorphism ring of index dividing l^. This statement is not true, 
as the following example shows. 

Example 8.3. Consider the cyclic quartic CM-field K = Q[X]/(X^ + 12X2 ^ ^^^^^i 
has class number 2. The Igusa class polynomials have degree 2 and over F127 we find the 
corresponding moduh points Wq = (118,71,63), Wi = (98,82,56). The isogeny graph is 
not regular: 




The white dots represent the points having maximal endomorphism ring. There are 
7 points isogenous to wq, which includes wi. One cannot identify wi from the graph 
structure alone. This demonstrates that the isogeny graph is insufficient to determine 
the endomorphism rings; the polarized CM-lattices are also required. o 
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The 'reason' that the graph has this shape is the following. Let tt G Ok correspond to 
the Frobenius morphism of a surface A belonging to the vertex wi. If A' is (/, /)-isogenous 
to A, then A' is defined over Fp if and only if its endomorphism ring contains vr. Since 
there are several orders of index dividing in Ok, it can happen that vr is contained 
in some of them, and not in others. In our example, the black points all have the 
same endomorphism ring O' with 7i E O'. The 33 other isogenous surfaces have an 
endomorphism ring that contains vr^, but not vr. 
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